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Amendment to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 



Listing of Claims : 

1. (currently amended) A scalar multiplication calculation method in an elliptic 
curve cryptosystem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve, comprising the steps of: 

determining a value of a bit of said scalar value; and 

executing operations on said elliptic curve a predetermined number of times 
and in a predetermined order without depending on said determined value of said bit 
to calculate a scalar multiplied point; 

wherein said operations include calculations of addition and doubling, said 
operations being selected for sca l ar va l u e s a bit value of one or zero, the sca l ar bit 
value determining the so l ootion contents of said addition and doubling calculations 
to be executed. 

2. (currently amended) A scalar multiplication calculation method in an elliptic 
curve cryptosystem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve, comprising the steps of: 

determining a value of a bit of said scalar value; and 
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executing calculations of addition on said elliptic curve and doubling on said 

elliptic curve in the order that said doubling on said elliptic curve is executed after 

said addition on said elliptic curve is executed to calculate a scalar multiplied point; 
wherein said addition and doubling calculations are selected for Gcalar va l u e s 

a bit value of one or zero, the scata^bit value determining the s ele ct i on contents of 

said addition and doubling calculations to be executed. 

3. (currently amended) A scalar multiplication calculation method in an elliptic 
curve cryptosystem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve, comprising the steps of: 

determining a value of a bit of said scalar value; and 

executing calculations of addition on said elliptic curve and doubling on said 
elliptic curve in the order that said addition on said elliptic curve is executed after 
said doubling on said elliptic curve is executed to calculate a scalar multiplied point; 

wherein said addition and doubling calculations are selected for scalar va l ues 
a bit value of one or zero, the seatef-bit value determining the s ele ct i on contents of 
said addition and doubling calculations to be executed. 

4. (currently amended) A scalar multiplication calculation method in an elliptic 
curve cryptosystem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve, comprising the steps of: 

determining a value of a bit of said scalar value; and 
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executing calculations of addition on said elliptic curve and doubling on said 

elliptic curve simultaneously to calculate a scalar multiplied point; 

wherein said addition and doubling calculations are selected for sca l ar valu e s 

a bit value of one or zero, the seata^bit value determining the s ele ct i on contents of 

said addition and doubling calculations to be executed. 

5. (currently amended) A scalar multiplication calculation method in an elliptic 
curve cryptosystem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve, comprising the steps of: 

executing addition on said elliptic curve; 
determining a value of a bit of said scalar value; and 
executing doubling calculations on said elliptic curve to calculate a scalar 
multiplied point; 

wherein said doubling calculations are selected for sca l ar va l u e s a bit value of 
one or zero, the seala^bit value determining the s ele ct i on contents of said doubling 
calculations to be executed. 

6. (currently amended) A scalar multiplication calculation method in an elliptic 
curve cryptosystem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve, comprising the steps of: 

randomizing calculation order of addition on said elliptic curve and doubling 
on said elliptic curve; 

determining a value of a bit of said scalar value; and 
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executing said addition on said elliptic curve and said doubling on said elliptic 
curve in said order randomized by said step of randomizing calculation order of 
addition on said elliptic curve and doubling on said elliptic curve to calculate a scalar 
multiplied point; 

wherein said calculations of addition and doubling are selected for sca l ar 
values- a bit value of one or zero, the seata^bit value determining the s ele ct i on 
contents of said addition and doubling calculations to be executed. 

7. (currently amended) A scalar multiplication calculation method in an elliptic 
curve cryptosystem for calculating a scalar multiplied point on the basis of a scalar 
value and a point on an elliptic curve, comprising the steps of: 

determining a value of a bit of said scalar value; 

randomizing calculation order of addition on said elliptic curve and doubling 
on said elliptic curve; and 

executing said addition on said elliptic curve and said doubling on said elliptic 
curve in said order randomized by said step of randomizing calculation order of 
addition on said elliptic curve and doubling on said elliptic curve to calculate a scalar 
multiplied point; 

wherein said calculations of addition and doubling are selected for sca l ar 
vatues -a bit value of one or zero, the scata^bit value determining the selection of 
said addition and doubling calculations to be executed. 
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8. (original) A data generation method for generating second data from first 
data, comprising the step of calculating a scalar multiplication by use of a scalar 
multiplication calculation method according to any one of Claims 1 to 7. 

9. (original) A signature generation method for generating signature data 
from data, comprising the step of calculating a scalar multiplication by use of a 
scalar multiplication calculation method according to any one of Claims 1 to 7. 

10. (original) A decryption method for generating decrypted data from 
encrypted data, comprising the step of calculating a scalar multiplication by use of a 
scalar multiplication calculation method according to any one of Claims 1 to 7. 

1 1 . (currently amended) A scalar multiplication calculator for calculating a 
scalar multiplied point on the basis of a scalar value and a point on an elliptic curve 
in an elliptic curve cryptosystem, comprising: 

bit value judgment means for determining a value of a bit of said scalar value; 
addition operation means for executing addition calculations on said elliptic 
curve; and 

doubling operation means for executing doubling calculations on said elliptic 

curve; 

wherein after the value of said bit of scalar value is determined by said bit 
value judgment means, said addition on said elliptic curve and said doubling on said 
elliptic curve are executed by said addition operation means and said doubling 
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operation means a predetermined number of times and in a predetermined order so 
as to calculate a scalar multiplied point, 

wherein said addition and doubling calculations are selected for sca l ar va l ues 
a bit value of one or zero, the seala^bit value determining the selection of said 
addition and doubling calculations to be executed. 

12. (original) A recording medium for storing a program relating to a scalar 
multiplication calculation method according to any one of Claims 1 to 7. 

13. (original) A scalar multiplication calculation method according to any one 
of Claims 1 to 7, wherein a Montgomery-form elliptic curve is used as said elliptic 
curve. 

14. (original) A scalar multiplication calculation method according to any one 
of Claims 1 to 7, wherein an elliptic curve defined on a finite field of characteristic 2 
is used as said elliptic curve. 

15. (currently amended) The multiplication calculation method according to 
claim 1 , wherein when the value of the bit of the scalar value is 0, the addition % 
calculation includes adding a point mP to a doubl e po i nt of th e point (m+1)P and the 
doubling calculations include doubling the point mP to obtain 2(mP) where m 
comprises the scalar value and P comprises the point, and 
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wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a doub l e point of th e point (m+1)P and the 
doubling calculations include doubling the doub le po i nt of the point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

16. (currently amended) The multiplication calculation method according to 
claim 2, wherein when the value of the bit of the scalar value is 0, the addition 
calculation includes adding a point mP to a doub le po i nt of th e point (m+1)P and the 
doubling calculations include doubling the point mP to obtain 2(mP) where m 
comprises the scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a double po i nt of the point (m+1)P and the 
doubling calculations include doubling the doub le point of the point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

17. (currently amended) The multiplication calculation method according to 
claim 3, wherein when the value of the bit of the scalar value is 0, the addition 
calculation includes adding a point mP to a doub le point of the point (m+1)P and the 
doubling calculations include doubling the point mP to obtain 2(mP) where m 
comprises the scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a double point of the point (m+1)P and the 
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doubling calculations include doubling the double po i nt of th e point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

18. (currently amended) The multiplication calculation method according to 
claim 4, wherein when the value of the bit of the scalar value is 0, the addition 
calculation includes adding a point mP to a doubl e point of th e point (m+1)P and the 
doubling calculations include doubling the point mP to obtain 2(mP) where m 
comprises the scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a doubl e po i nt of the point (m+1)P and the 
doubling calculations include doubling the doubl e po i nt of the point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

19. (currently amended) The multiplication calculation method according to 
claim 5, wherein when the value of the bit of the scalar value is 0, the addition 
calculation includes adding a point mP to a doub l e po i nt of the point (m+1)P and the 
doubling calculations include doubling the point mP to obtain 2(mP) where m 
comprises the scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a doub le point of the point (m+1)P and the 
doubling calculations include doubling the double po i nt of the point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 



9 



U.S. Application No. 09/811,459 

20. (currently amended) The multiplication calculation method according to 
claim 6, wherein when the value of the bit of the scalar value is 0, the addition 
calculation includes adding a point mP to a doubl e po i nt of th e point (m+1)P and the 
doubling calculations include doubling the point mP to obtain 2(mP) where m 
comprises the scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a doubl e point of th e point (m+1)P and the 
doubling calculations include doubling the doub le point of th e point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

21. (currently amended) The multiplication calculation method according to 
claim 7, wherein when the value of the bit of the scalar value is 0, the addition 
calculation includes adding a point mP to a doub le po i nt of th e point (m+1)P and the 
doubling calculations include doubling the point mP to obtain 2(mP) where m 
comprises the scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a doub le po i nt of th e point (m+1)P and the 
doubling calculations include doubling the doubl e po i nt of th e point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point. 

22. (currently amended) The multiplication calculation method according to 
claim 1 1 , wherein when the value of the bit of the scalar value is 0, the addition 
calculation includes adding a point mP to a doub le po i nt of th e point (m+1)P and the 
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doubling calculations include doubling the point mP to obtain 2(mP) where m 
comprises the scalar value and P comprises the point, and 

wherein when the value of the bit of the scalar value is 1 , the addition 
calculation includes adding a point mP to a doubl e po i nt of th e point (m+1)P and the 
doubling calculations include doubling the doub le po i nt of th e point (m+1)P to obtain 
2((m+1)P) where m comprises the scalar value and P comprises the point 
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